     (is (= dash-arch
            (ac/get-acl (u/conn-context) (:concept_id acl3) {:token token})))
 
-    (is (= {"DASHBOARD_DAAC_CURATOR" ["read" "create" "update" "delete"]}
+    (is (= {"DASHBOARD_DAAC_CURATOR" ["read"]}
            (json/parse-string
              (ac/get-permissions (u/conn-context) {:user_type "guest"
                                                    :provider "PROV1"
                                                    :target "DASHBOARD_DAAC_CURATOR"}
                                  {:token token}))))
-    (is (= {"DASHBOARD_ADMIN" ["read" "create" "update" "delete"]}
+    (is (= {"DASHBOARD_ADMIN" ["read"]}
            (json/parse-string
              (ac/get-permissions (u/conn-context) {:user_type "guest"
                                                    :system_object "DASHBOARD_ADMIN"}
                                  {:token token}))))
-    (is (= {"DASHBOARD_ARC_CURATOR" ["read" "create" "update" "delete"]}
+    (is (= {"DASHBOARD_ARC_CURATOR" ["read"]}
            (json/parse-string
              (ac/get-permissions (u/conn-context) {:user_type "guest"
                                                    :system_object "DASHBOARD_ARC_CURATOR"}

        group1 (u/ingest-group user1-token {:name "group1"} ["user1"])
        group1-concept-id (:concept_id group1)
        dash-daac {:group_permissions [{:user_type "guest"
                                        :permissions ["read" "create" "delete" "update"]}
                                       {:group_id group1-concept-id
                                        :permissions ["read" "create" "delete" "update"]}]
                   :provider_identity {:provider_id "PROV1"

                            dash-daac
                            {:token token})
        dash-admin {:group_permissions [{:user_type "guest"
                                         :permissions ["read"]}
                                        {:group_id group1-concept-id
                                         :permissions ["read" "create" "delete" "update"]}]
                    :system_identity {:target "DASHBOARD_ADMIN"}}
